[ooi] A Security System 

[002] Field of the Invention 

[003] This invention relates to security systems. It is particularly applicable to vehicle 

security systems, but also to other security systems such as those for buildings. 




[004] Background to Ihe Invention 



[oos] Passive entry and passive starting systems are known for vehicles and allow a 

user to gain entry to a vehicle by simply operating a door handle and to remobifize 
passively and start an engine or other subsystem of the vehicle, e.g. by pressing a 
button. All this can be achieved by a user simply carrying a transponder about their 
person. 
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^ [006] a system of this type might work, on detection of door handle operation, by 

sending a challenge to a remote transponder using a low frequency signal, e.g. 125 
kHz. The transponder might then respond with an encrypted reply on a higher 
frequency, e.g. 433 MHz. The low frequency (LF) signal may be sent from coils located 
near the front doors and boot and further coils may be installed »n the interior of the 
\ vehicle so as to establish when the transponder is inside the vehicle to facilitate engine 
starting. This general type of passive entry and starting system is discussed in, for 
example, US 4,973,958 and in EP 0783190. 

[007] It is a problem with some prior art security systems that a criminal can employ 

transmitter-receiver pairs with a two-way link between the vehicle and its owner. The 
criminal may succeed in gaining access to the car, even though the authorising 
transponder is not in his possession or even within range of the vehicle. One 
arrangement which provides protection against such so-called relay hackers is 
disclosed in our co-pending application GB 2332548. 
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[008] There are other problems associated in particular with the "passive start" of a 
passive entry and passive enable/start arrangement. If, for example, detectors for 
passive starting rely on distance attenuation to determine whether a user is in the 
immediate locality of the driver's seat, it might prove difficult, due to the variability and 
shape of the magnetic fields, to guarantee completely reliable operation. For example a 
user carrying the transponder might be leaning against a driver's window while a child 
is standing on the drivers seat and this might cause the system to mistakenly 
determine that the conditions for enabling the starter switch had been satisfied. 



[009] Summary of the Invention 



iSio] Accordingly, the invention provides a security system for a protected object, the 
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system comprising a security controller and a plurality of signal transmitters associated 
l with the protected object, and a portable transponder, wherein the transmitters are 
arranged in use to transmit a challenge signal, the transponder is arranged to receive 
the challenge signal from said transmitters and to transmit in response thereto a 
response signal which includes a vector quantity, the transponder is further arranged to 
f measur - e vector information relating to the vector quantity, and to vary its response 
depending on vector information, and the controller defines predetermined criteria and 
is arranged to determine from the response of the transponder whether the vector 
information meets said criteria, and to perform a security function only if the criteria are 
met. 



[oil] Preferably the vector information relates to the direction of a field, such as a 

magnetic field, which forms at least part of the challenge signal. The vector information 
may therefore comprise at least one component of a vector quantity of the challenge 
signal, and preferably comprises three components which are, most conveniently, 
mutually perpendicular. 



Preferably the vector information comprises the relative directions of at least a 
component of the signals from the respective transmitters. This has the advantage that 
the relative directions are not affected by the orientation of the transponder relative to 
the protected object. 

Preferably the vector information comprises the relative strengths of at least a 
component of the signals from the respective transmitters. 

The transponder may be arranged to relay said vector information to the security 
controller, and the security controller arranged to determine from the vector information 
whether the criteria are met. 

Alternatively the transponder may be arranged to determine from the vector 
information whether the criteria are met T and to vary its response depending on 
whether they are. This may be by only responding of the criteria are met, or by sending 
a response which indicates if a challenge is received of which the vector information 
does not meet the criteria. 

Preferably the vector information is indicative of the position of the transponder 
relative to the protected object, and the criteria comprise the vector information being 
consistent with the transponder being positioned in a predetermined relationship to ssid 
protected object. 

For example, the security controller may be arranged to carry out a comparison 
between said vector information and a vector map of an area associated with the 
protected object, the map containing the vector information consistent with the 
transponder being at various positions within the area. 
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[018] The transmitters may be arranged in groups, each group comprising at least two 
transmitters located substantially together in different, preferably mutually orthogonal, 
orientations. 

[019] The challenge signal may comprise a plurality of components from different 
transmitters, and the relative strengths of the components within the signal arranged to 
vary with time during transmission of the challenge signal. In this case the criteria can 
comprise the vector information varying in a way consistent with the varying in relative 
strength of said components. This arrangement increases security because a hacker 
would need to be able to detect the changes of direction of the field and transmit the 

*,B relevant information back to the controller in the required format. 

m 

rebo] The transponder preferably comprises a plurality of sensors, such as inductive 
^ coils or Hall effect transducers, arranged to detect different components of the 

in 

3 challenge signal, which are preferably substantially mutually orthogonal. 

■asp 

||2i] Preferably the transponder further comprises a calibration transmitter arranged to 

53 transmit a signal at a known orientation relative to said sensors so as to enable 
calibration of the sensors. 

[022] The object may be a vehicle, in which case the security function may comprise 

allowing access to the vehicle. 

[023] Preferably the system further comprises a plurality of sensors each associated 

with a respective closure of the vehicle, such as a door or boot lid, the security 
controller is arranged to issue the challenge signal in response to an attempt by a user 
to open one of the closures, and the criteria vary depending on which closure the user 
is attempting to open. 
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[024] Alternatively the security function may comprise enabling the vehicle to start, in 
which case the criteria preferably comprise the vector information being consistent with 
the transponder being inside the vehicle. 

Preferably the challenge signals are transmitted as magnetic fields which oscillate 
at a carrier frequency which is low enough for the area in which the transponder is 
expected to operate to be significantly less than one wavelength of the challenge 
signals if they were transmitted as electromagnetic radiation. If this is the case, the 
fields produced by the challenge signals can be considered as simple magnetic fields 
and any changes in the field within the area of interest will be substantially in phase 
with the changes at the transmitter coils- For a vehicle security system this means that 
the frequency is preferably below about 10MHz, and more preferably below abdut 
1MHz. 

The response signal can be transmitted at any suitable frequency, such as 13.56 
MHz or 434MHz. 

Preferred embodiments of the invention will now be described by way of example 
only and with reference to the accompanying drawings. 

[028] Brief Description of the Drawings 

[029] Figure 1 is a schematic diagram of a vehicle including a security system according 

to the invention; 

[030] Figure 2 is a diagram showing the magnetic field produced by the system of 

Figure 1 , 

[031] Figures 3a ( 3b, 3c, and 3d show the effect of phase relationships on the addition 

of fields from two transmitters of the system of Figure 1, 
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Figure 4 is a flow chart of one aspect of the operation of the system of Figure 1 , 



Figure 5 is a flow chart of another aspect of the operation of the system of Figure 

1, 

Figure 6 shows the coils making up a transponder forming part of a second 
embodiment of the invention, and 

Figure 7 shows a pair of transmitter coils forming part of a third embodiment of the 
invention. 

Detailed Description of the Preferred Embodiments 

Referring to the figures, a vehicle 1 0 comprises three transmitters in the form of 
coils A, B, C spaced around it. The coils A, B, C are located one each A, B in opposing 
wing mirror assemblies 12, 14 and one C in a high level brake light assembly 16 at the 
rear end of the vehicle 10. 

The vehicle further comprises a security controller 18 which has control oyer 
vehicle access through a set of doors 20L, 20R and also has control over starting the 
vehicle engine 21. The security system for controlling vehicle access and vehicle 
starting is in the form of so-called "passive entry/passive start 1 ' system. This involves 
the controller 1 8 sending out a challenge signal using coils A, B, C upon detection of an 
access request such as the operation of a door handle 22L, 22R. If the challenge signal 
is legitimately responded to with a valid and plausible response signal, which is 
received by a receiver 23 in the control unit 18, the doors unlatch to allow access. In 
similar fashion* engine starting is also passively enabled upon pressing a starter button 
24. 
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[039] The challenge signal is sent out initially using the coil B nearest to the door handle 
22L which has been operated or, if it is passive starting which is being attempted, by 
the coil B nearest to the starter switch. The challenge signal is then sent out again 
sequentially on at least one of the other coils A, C, the signal from each coil A, B. C 
being uniquely identified with the location 12, 14, 16 of that coil A, B, C, 



[040] The response signal RS, If any, to the challenge signal is provided by a portable 
transponder 2@ which is adapted to be carried by an authorised user of the vehicle 10, 
The transponder 26 includes three substantially orthogonal coils X, Y, 2. These are 
connected via analogue switches to a single low frequency (LF) receiver, although it 

53 

\3 will be apparent that in another embodiment it would be possible to connect th$m 

S3 

mi instead to three LF receivers wjthout using analogue switches. 

~=? 

f|4i] Referring to Figure 2, because of the relatively low frequency of the challenge 

* signal, which in this example has a nominal carrier frequency of 125kHz, for all relevant 

O 

v3 positions of the transponder 26 near the vehicle, the field produced by the coils A. B, C 
will behave in the near field manner. This means that it can be considered as ian 

O 

M« oscillating magnetic field, the magnitude and direction of which will be as shown by the 
lines of flux in Figure 2. The magnitude of the field strength will vary substantially 
sinusoidally, giving two changes of field direction with each cycle. The strength of the 
field from each coil A, B, C falls off in an approximately cube root relationship with 
distance from the respective coil. It will be appreciated that for any given position 
around the vehicle 10, there will be a fixed relationship between the directions and 
magnitudes of the magnetic field signals from the three coils A, B, C. However, this 
relationship will vary in a quite complex manner because the direction of the fields 
varies not only with the relative direction of the point of measurement from the coil, but 
also with the distance between the point of measurement and the coil. 
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[042] Therefore in order to use the vector information regarding the fields, it is 
necessary to produce a map of the area around the vehicle having, for each position, 
stored values for the relative directions and strengths of the fields from the three coils 
A, B, C. This gives unique values for each position so that the position of the 
transponder 26 can be identified from the signals it receives. 

The signal levels from each of the three transponder coils X, Y, Z are measured 
and are processed to give the three orthogonal components of the field vector A, B, C , 
of the challenge signal coming in from each of the coils A, B, C. The vector information 
for each of the transmitter coils A, B, C is sent back to the security controller 18 as an 
encrypted response signal, which can either be in the form of an angle and magnitude, 
or in the form of the components e.g. Xb, y b , z b in which each component indicates the 
signal levels detected in the transponder coils X, Y, Z from the vector of the signal 
coming in from the vehicle coil B in question. It should be noted that in order to 
determine the. sign of each component, that is to assign a positive or negative value to 
it, the timing of the measurement of the three components needs to be co-ordinated so 
that phase relationship can determined. Then one of the components xt, y b , Zt is 
defined as positive, e.g. x b , and then the other components y b , z b are designated as 
positive or negative depending on whether the signals detected by the coils Y and Z 
are in phase or in antiphase with that detected by coil X. The three components of the 
signals for each of the three coils A. B, C are sent back by the transponder to the 
controller 18 which can then use them to determine the position of the transponder as 
will be described in more detail below. 

[044] The format of the challenge and response signals is as follows. Firstly the 

challenge signal includes at least an element which is random, 

i.e. Challenge Signal = Random Challenge 



[043] 
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The response signal is encrypted and includes the random challenge signal, or the 
random element from it, and the three components of the signals from each of the 
three coils A, B, C, i.e. 

Response Signal RS = Encrypted (random challenge+vector information) 

The encryption is preferable a symmetrical algorithm having the or each 
encryption key stored in both the transponder 26 and in the security controller 18. The 
response signal is transmitted in RF, in this example at 434 MHz, and is decrypted by 
the security controller 18 to check that the encrypted challenge in the response signal 
RS matches the transmitted challenge signal and, if so, the transponder 26 is 
authenticated. 

It will be appreciated that the direction of the field of the signal from one of the 
coils A, B or C as measured by the transponder will depend not only on the relative 
positions of the vehicle and the transponder, but also on the orientation of the 
transponder. In order to eliminate the effects of the orientation of the transponder ft is 
necessary to measure the relative directions of pairs of the coils A, B, C as measured 
from the transponder. The controller therefore first determines the angles of the fields 
for each of the three signals, e,g. 

<|>a = f(xA, y A , za), similarly for B and C 

It then measures the difference between the angles of each pair of coils A and B, 
A and C, and B and C i.e. 

0AO = <t>A " <t>& > <t>AC = <t>A - <|>C , <t>BC — $B " 4>C * 

These relative angles are independent of the orientation of the transponder. 
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The security controller 18 uses the vector information to determjne the position of 
the transponder 26 in relation to the vehicle 10, by comparing the relative angles with a 
vector map of the area around the vehicle. 

In the simplest case only the relative angles of the field vectors A, B, C are used to 
compare with the vector map. However the three components x a , y a , z a , of the vector 
for coil A also indicate the magnitude of the field vector for the signal from coil A, and 
likewise the components of the signals from coils B and C. The absolute magnitudes 
would be variable depending on a number of factors, but the relative magnitudes of the 
signals from the three coils A, B, C could be measured and included in the vector map 
to give further information on the position of the transponder. 

In some cases sensors may be used in the transponder which cannot measure 
the phase information of the field vectors in the detected signals. Referring to Figures 
3a and 3b, this produces a degree of ambiguity in the relative angles of two of the filed 
vectors A and B. If, as shown, field A is oscillating along the direction of arrow A and 
field B is oscillating along the direction of arrow B, then the angle between the vectors 
could be <j»Asi as shown in Figure 3a, or <j> AB2 as shown in Figure 3b. In order to resolve 
this, the signals A and B are transmitted both individually, and together. For example 
the controller 18 may produce a signal from coil A, then one simultaneously from A and 
B, and then one solely from B. Referring to Figures 3c and 3d, if the angle between the 
two field vectors is acute, that is less than 90°, as shown in Figure 3c, then the 
combined vector A+B~i will be larger than if the angle between the two vectors is 
obtuse, that is greater than 90°, as shown in Figure 3d as A+Ba- 

As a means of confirming the relative angles it may be preferred to reverse the 
phase on one of the coils A, B and produce a second combined signal A-B. This will 
enable a comparison between the vector sums of the two combined signals to 
determine which has the greater magnitude. 
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In an alternative embodiment, the transponder 26 could include the logic means 
necessary to determine internally its position with respect to the vehicle 10 and merely 
relay this information back to the security controller 18. The transponder 26 may 
include sufficient processing ability to enable it to determine from the signals it detects 
whether it is in a position consistent with being in the possession of a person opening a 
door or boot of the vehicle. In this case H will only send a response signal if that 
condition is met. 

The security controller 18 also includes in that plausibility check any additional 
information it may have about the transponder's likely location. For example, if the 
challenge signal was initiated by operating a particular door handle 22L, the security 
controller 18 can assume that, for the response signal RS to pass the plausibility test, 
the vector information it 18 receives as a response signal RS should put the 
transponder 26 in the region of the vector map nearest to that door 20L. 



In practice, more vehicle coils may be preferred, in order to reduce the range 



Referring to Figure 4, an example of the operation of the system will now be 
described. If a user approaches the vehicle 10 and operates a door handle 22L, this 
initiates a challenge from the vehicle 10 on the coil B nearest the door 20L in question. 
If the transponder 26 is not within range of the challenge signal it will not produce a 
response .signal and the door will not be opened. 

If the transponder 26 is within range and the identities of the vehicle 10 and the 
transponder 26 match, the transponder transmits back to the security controller 18 a 
signal in which is encrypted vector information x b , yt>. Zb- 




required from each vehicle coil A, B, C. 



- 12- 

[0581 The vehicle 10 then transmits the same or a different challenge on a different coil, 
e,g. coil C. The process described above is repeated, such that the transponder 26 
provides the vector information x c , y c , *c back to the security controller 18. 
Transmissions are made on as many of the coils as are required, either individually or 
in pairs as described above, for the relative angles and magnitudes of the vectors of 
the signals from the three coils A, B, C to be calculated. These relative angles and 
magnitudes are then compared with a vector map of the area in and around the vehicle 
to determine the position of the transponder. If the transponder 26 is within a 
predefined area near the door 20L, then the door is opened. 

[®59] For a passive start application, it is preferred that the transponder 26 and the 
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driver are both within the vehicle 10, not adjacent to it, before allowing the vehicle 10 to 
be started. Use of the three orthogonal coils X, Y, Z in the transponder 26 and a vector 
map of the area in and around the vehicle allows the position of the transponder, and 
hence also the driver, to be determined with a high degree of certainty. 



|g60] Referring to Figure 5 an example of the process for passive start will be described. 

u- If a user has gained access to the vehicle 10 and wishes to start it, he presses the 
starter button 24, and a challenge signal is sent by the coil B nearest the button 24, If 
the transponder 26 is not within range then no response signal will be sent and the 
controller 18 will not allow starting of the vehicle. If the transponder 26 is within range 
and does receive the challenge, it transmits back to the security controller 18 a signal 
in which is encrypted vector information, e.g. x b , y b , z b . 

[061] The vehicle 10 the challenge signal is then transmitted on all of the coils A, B F C 

both individually and in combination as required to determine the relative angles of the 
three coils, and the vector information is transmitted back to the controller 18 in 
encrypted form. The position of the transponder is then determined and provided it is 
within the vehicle, the vehicle is started- During this phase of passive remobilization, it 
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may prove advantageous to additionally include further sensing arrangements, such as 
seat mounted weight sensing, for further security when starting the engine. 

[062] Two requirements for the coils X, Y, 2 may create problems, Firstly, in the 
interests of sensitivity, the Q of the receiver coils X, Y, Z will be high and this might lead 
to variations in signal response. Secondly, to produce a preferred transponder 26 in the 
form of a flat "credit card7"smart card 11 transponder, one of the transponder coils X f Y, 
Z may need to be a low profile type, also potentially leading to a varying sensitivity. 

f$63j Therefore, it is desirable to include a self-calibration function in the transponder 
26. This can be achieved by adding a fourth coil W as shown in Figure 6 which is 
equally spaced in angle between the other three X, Y, Z and can be used to inject a 
signal into the three receiver coils X 7 Y, Z and allow them to be calibrated. Because the 
II angles 6 W e yw 6^ between the calibration coil W and the other coils X> Y, Z are known, 
3 the sensitivities of the three coils X, Y T Z can be determined by measuring their 
response to a single signal transmitted by coil W. This calibration can be either used to 
p fe _p roce ss the signals x, y i z before transmission from the transponder 26 or 
transmitted in the encrypted response RS for use by the security controller 18 to 
normalise the signals. The calibration coil W can also be used to compensate for any 
slight differences in the tuning of the transponder coils X, Y, Z. To do this it is arranged 
to transmit signals of different frequencies closely spaced around the nominal 
frequency of the coils, and the responses of the coils X, Y, Z measured- Any 
differences between the responses of the coils X, Y, Z at the frequency of the 
challenge signal can then be compensated for in the measurement of the field vector 
components. 
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[064] The transponder coil assembly X, Y, Z may, for example, be embedded in a 
plastic or epoxy material with transponder logic circuits. This would have the advantage 
of excluding casual inspection or monitoring of the signals by a hacker. 
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[065] The embodiment described so far relates to a system where the vehicle coils A, B, 
C transmit at a nominal 1 25kHz and the transponder 26 responds at 434MHz. Clearly, 
the related 315, 868 and 900 etc bands can be used. It may be found desirable to use 
other frequencies for the communication from the vehicle 10. For example, the use of 
13,56MHz would allow a lower power transmission and a greater range. The 
transponder coils X, Y, Z could be changed in scale and possibly also in structure, to 
accommodate the change- Equally, the use of 434MHz in both directions may allow for 
some cost reduction in the transponder 26 due to the commbnisation of the 
frequencies. 

O 

1^66] Referring to Figure 7, it is also possible to introduce a further degree of difficulty 

% i 

in into a hacker's task by replacing the transmitter coil A with a pair of coils A1 , A2 at 

\j mutually orthogonal orientations. The other two coils B and C would similarly be 

Pfl 

{ri replaced by to orthogonal coils. The field produced by each of the coil pairs A, B and C 
J! 3 can then be rotated by varying the relative strengths of the signals from the two coils in 
■jf the pair. This means that during the transmission of a challenge signal, which will 
?9 generally be in the form of a number of bits, the direction of the field can be varied, for 
^ example by simply switching between coils for subsequent bits, or by combining 
signals from the two coils to provide a combined field the direction of which can then be 
rotated in a more complex manner over a range of angles by varying the relath/e 
strengths of the two signals. The changes in direction of the field can then be detected 
by the transponder and used as the vector information which is relayed back to the 
controller 18 and checked before allowing access to, or starting of, the vehicle. Indeed 
this approach can be used with only one pair of coils at a single location on the vehicle. 
In this case the field may still vary with position, and may therefore be used to give 
some degree of checking on the position of the transponder, and this combined with 
the complication for a hacker of detecting, and relaying information about, the vector 
quantities of the signal can provide sufficient security for some applications. It also has 
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the advantage of reduced cost compared with a system having a number of 
transmitters located around the vehicle. 

[0671 ln a further modification to this technique it will be appreciated that signals from 

the separate coils A f B and C, if transmitted simultaneously, will combine to form a field 

the direction of which is dependent on which of the coils A, B or C or which 

combinations of two or all three of them are transmitting. Again this means that the 

> 

direction of the field at any point round the vehicle can be varied with time by varying 
the relative strengths of the signals from the coils A f B, C, and this variation used as at 
least part of the relevant vector information. Therefore as described above, the field 
direction can be modified in a pre-determined manner on a bit by bit basis as a code 
modulation. The transponder 26 can be set up only to respond to a correct code in this 
modulation, or to relay the modulation information back to the controller for checking 
before access to the vehicle is allowed. 
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fl68] Hall effect sensors could be used instead of transponder coils X, Y, Z. If using a 
CO Hall effect sensor for measurement of the direction of the magnetic fields, then data 
1% can also be sent without a carrier frequency. Use of a DC field as the challenge signal 
would save the need to generate and condition AC signals. Furthermore, Hall effect 
transducers lend themselves better to integration in "smart card" structures than do 
coils. 

[069] ln a further embodiment of the invention the transmitter coils A, B, C are arranged 
to transmit at much higher frequencies in the GHz waveband. At these frequencies the 
signals in the area in and around the vehicle will no longer be in the near field region, 
but will instead be in the far field region. This means that they will be propagating as 
electromagnetic radiation, and the direction of the electric and magnetic fields will be 
perpendicular to the direction of travel of the radiation, which in turn will be in a straight 
line away from the transmitting coil. Therefore the relative angles of the various 
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transmitters from the transponder can be measured directly by measuring the 
differences in angle between the fields of the signals from the transmitters. Also at 
these frequencies the same frequency can be used for the challenge signal and the 
response signal allowing for some cost reduction in the transponder unit 



